name: Lua version: 5.4.9 source: https://www.lua.org/ftp/lua-5.4.9.tar.gz license: MIT (https://www.lua.org/license.html) pinned-commit: 312b9efaa1061c2c4cad08554dbc1351c3270eef git tag v5.4.9 on the official lua/lua GitHub mirror (https://github.com/lua/lua/tree/v5.4.9); the lua.org tarball has no git history, so the mirror tag SHA pins the exact source revision. tarball-sha256: 2335b6c582a52654f94612bf10d2f4672805d05329aa6568b1d8cd9e5c6fb8e6 sha256 published on https://www.lua.org/ftp/ for lua-5.4.9.tar.gz (verified at vendoring time; `sha256sum -c` passes). vendored-files: src/*.c + src/*.h from the official tarball (61 files, including the lua.c/luac.c standalone mains); LICENSE (verbatim MIT text as shipped in doc/readme.html and lua.h). The src/Makefile is not vendored; the library is built by the project's own build.